saveinmed/backend/internal/http/middleware
Tiago Yamamoto beffeb8268 feat(security): add rate limiting and security headers middleware
Rate Limiting (ratelimit.go):
- Token bucket algorithm per IP
- Default: 100 requests/minute
- X-Forwarded-For support
- Cleanup for stale buckets
- 7 tests (ratelimit_test.go)

Security Headers (security.go):
- X-Content-Type-Options: nosniff
- X-Frame-Options: DENY
- X-XSS-Protection: 1; mode=block
- Content-Security-Policy: default-src 'none'
- Referrer-Policy: strict-origin-when-cross-origin
- Cache-Control: no-store, max-age=0

Middleware coverage: 97.3% -> 95.8% (new code added)
2025-12-20 08:41:36 -03:00
..
auth.go Implement JWT auth and company verification 2025-12-18 12:29:51 -03:00
compress.go docs: adiciona documentação completa do projeto SaveInMed 2025-12-17 17:07:30 -03:00
cors.go feat(backend): add configurable CORS and optimize Dockerfile 2025-12-19 17:34:30 -03:00
logging.go docs: adiciona documentação completa do projeto SaveInMed 2025-12-17 17:07:30 -03:00
middleware_test.go feat(security): add rate limiting and security headers middleware 2025-12-20 08:41:36 -03:00
ratelimit.go feat(security): add rate limiting and security headers middleware 2025-12-20 08:41:36 -03:00
ratelimit_test.go feat(security): add rate limiting and security headers middleware 2025-12-20 08:41:36 -03:00
security.go feat(security): add rate limiting and security headers middleware 2025-12-20 08:41:36 -03:00